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fmendments to the Claims: This listing of claims will replace all prior versions, and listings, 
of claims in the application 

Listing of Claims: 

1. (Original) A method for forming a strong password comprising the steps 

of: 

obtaining biometric data from a user? 
generating a one-time password for the user; and 

combining the biometric data and the one-time password to form the strong 

password. 

2. (Original) A method according to claim 1, further comprising the step of 
encrypting the combined one-time password and biometric data using an encryption key to 
form the strong password. 

3. (Original) A method for controlling access to secure data comprising the 

steps of: 

receiving a strong password including one-time password and biometric data 

from a user; 

separating the one-time password and the biometric data; 

comparing the one-time password to a calculated one-time password to 
determine if the one-time password is valid; 

determining a probability that the biometric data is from the user; 
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encrypting the secure data using an encryption key to obtain encrypted data If 
the one-time password matches the calculated one-time password and the probability that the 
biometric data is from the user exceeds a predetermined threshold value; 

combining the strong password, the encryption key and the encrypted data; and 

transmitting the combined strong password, encryption key and encrypted data 

to the user. 

4. (Original) A method according to claim 3, further including the step of 
encrypting the combined strong password and encryption key using a further encryption key. 

5. (Original) A method according to claim 3, wherein the secure data 
includes items having respectively different security levels, and the step of encrypting the 
secure data aborts the method if ejther the one-time password does not match the calculated 
one-time password or the probability that the biometric data Is from the user does not exceed 
the predetermined threshold value. 

6. (Currently Amended) A system for Implementing secure access to a 
remote computer system comprising: 

at least one first computer securely coupled to the remote computer system; 

at least one second computer coupled to said at least one first computer and 
configured to obtain identifying Information from a user; 

wl^H^b ywherein the; second computer passes the identifying information to the 
first computer, the first computer passes the identifying information to the remote computer 
system and the remote computer system verifies the identifying information. 

7. (Original) A Isystem according to claim 6, wherein the identifying 
information is a strong password ipcluding a one-time password and biometric information. 
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8. (Original) A system according to claim 7, wherein the identifying 
Information Is encrypted with an encryption key. 

9. (Original) A system according to claim 8, wherein the at least one second 
computer Is securely connected to said at least one first computer by means of a Secure Socket 
Layer connection. 

10. (Original) A system according to claim 9, wherein the at least one second 
computer includes a further Secure Socket Layer connection for receiving the identifying 
information from the user- 

11. (Original) A system according to claim 9, wherein the remote computer 
includes firewall software through which the at least one first computer is coupled to the remote 
computer. 

12. (Original) A method of allowing access to secure data on a remote 
computer, including the steps of: 

a) receiving a request from a user to access the secure data at a first computer; 

b) transferring the request to access the secure data from the first computer to a 
second computer; 

c) transferring the request to access the secure data from the second computer to 
the remote computer; 

d) authorizing access to the secure data at the remote computer; 

e) transferring the secure data to the second computer; and 

f) transferring the secure data from the second computer to the user without 
using the first computer. 
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13. (Original) A method according to claim 12, wherein the request to access 
the secure data includes a strong password and step e) includes the steps of: 

encrypting the secure data with an encryption key; 

combining the encryption key with the strong password; 

encrypting the combined encryption key and strong password with a further 
encryption key; and 

transferring the encrypted combined encryption key and strong password and the 
encrypted secure data to the second computer. 

14. (Original) A method according to claim 13 wherein the step of encrypting 
the data with an encryption key includes encrypting the data with a symmetric encryption key 
and the step of encrypting the combined encryption key and strong password with a further 
encryption key includes the step of encrypting the combined encryption key and strong 
password with an asymmetric encryption key. 

15. (Original) A method according to claim 14, wherein the strong password 
includes a one-time password and biometric Information and the step d) Includes the steps of: 

separating the one-time password and the biometric information; 

comparing the one-time password to a calculated one-time password; 

determining a probability that the biometric Information matches an authorized 

user; and 

authorizing access to the secure data only if the one time password matches the 
calculated one-time password and the probability that the biometric information matches an 
authorized user exceeds a predetermined threshold value. 
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16. (Original) A computer readable carrier including computer program 
Instructions that cause a computer to form a strong password comprising the steps of: 

obtaining biometric data from a user; 

generating a one-time password for the user; and 

combining the biometric data and the one-time password to form the strong 

password. 

17. (Original) A computer readable carrier according to claim 16, wherein the 
computer program instructions further cause the computer to perform the step of encrypting 
the combined one-time password and biometric data using an encryption key to form the strong 
password. 

18. (Original) A computer readable carrier Including computer program 
instructions that cause a computer to Implement a method for controlling access to secure data 
comprising the steps of: 

receiving a strong password Including one-time password and biometric data 

from a user; 

separating the one-time password and the biometric data; 

comparing the one-time password to a calculated one-time password to 
determine If the one-time password Is valid; 

determining a probability that the biometric data is from the user; 

encrypting the secure data using an encryption key to obtain encrypted data If 
the one-time password matches the calculated one-time password and the probability that the 
biometric data is from the user exceeds a predetermined threshold value; 
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combining the strong password, the encryption key and the encrypted data; and 
transmitting the combined strong password, encryption key and encrypted data 

to the user. 

19. (Original) A computer readable carrier according to claim 18, wherein the 
computer program instructions further cause the computer to perform the step of encrypting 
the combined strong password and encryption key using a further encryption key. 

20. (Original) A computer readable carrier according to claim I9 f wherein the 
secure data includes items having respectively different security levels, and the computer 
program instructions further cause the computer to perform the step of aborting the method if 
either the one-time password does not match the calculated one-time password or the 
probability that the biometric data is from the user does not exceed the predetermined 
threshold value, 

21. (New) A method according to claim 1, wherein the step of combining the 
biometric data and the one-time password includes: 

concatenating the biometric data with the one-time password to form the strong 

password. 

22. (New) A method according to claim 1, wherein the step of combining the 
biometric data and the one-time password Includes: 

combining the biometric data with the one-time password using one or more 
arithmetic operations with a result used as the strong password. 
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